In the SFC scenario, automatic isolation is implemented after EPGs are configured.

In the SFC scenario, EPGs can only be configured based on logical routers, logical switches, and external network domains.

In the microsegmentation scenario, EPGs can be configured based on logical switches, external network domains, subnets, and terminals.

In the microsegmentation scenario, traffic between the source EPG and destination EPG can be redirected to SF nodes.